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I claim : 

1. A mailing machine assembly, comprising: 

a mailing machine including a controller, a security module 
connected to said controller, and a non- removable program 
memory operationally connected to said security module and 
configured to store an initialization program; and 

a removable authorization device to be operationally connected 
to said mailing machine and configured to be interrogated by 
said mailing machine; 

wherein said security module is programmed to check whether 
authorization is present and for preventing an initialization 
of said mailing machine without authorization. 

2. The mailing machine assembly according to claim 1, wherein 
said authorization device is indirectly connected to said 
mailing machine via a data source selected from the group 
consisting of a personal computer, a laptop, and a remote data 
center . 

3. The mailing machine assembly according to claim 1, wherein 
said authorization device is directly connected to said 
mailing machine. 
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4. The mailing machine assembly according to claim 2, wherein 
said mailing machine is a franking machine having a meter with 
a user interface, for a data input of predetermined INIT 
values, and a postal security device configured to check an 
authorization of the data input . 

5. The mailing machine assembly according to claim 4, wherein 
said franking machine has a base with a first interface for 
attachment of said data source containing initialization data 
for said mailing machine, and a second interface for 
attachment of said authorization device. 

6. The mailing machine assembly according to claim 5, wherein 
said authorization device is a dongle. 

7. The mailing machine assembly according to claim 5, wherein 
said data source contains initialization data for said mailing 
machine and is configured to be attached to said first 
interface of said base of said mailing machine, and wherein 
said authorization device is a chip card and a chip card 
reader is operatively connected to said meter via a further 
internal interface and arranged to be integrated into said 
base . 
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8. The mailing machine assembly according to claim 5, wherein 
said first, second and further interfaces of said mailing 
machine are serial interfaces. 

9. The mailing machine assembly according to claim 5, wherein 
said interface is a serial interface. 

10. The mailing machine assembly according to claim 5, 
wherein said first interface of said base of said mailing 
machine is configured for attachment of said data source, said 
authorization device is connected to said data source via a 
parallel interface, said data source is a computer and is 
coupled via a serial interface of said mailing machine, and 
wherein a chip card reader is integrated and operatively 
connected to said meter via an interface of said meter. 

11. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a franking machine with a 
meter and a chip card reader integrated in said meter and 
coupled to a parallel bus of said meter via an interface and 
wherein said authorization device is a chip card. 

12. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a set of scales, and wherein a 
chip card reader is integrated into said scales and coupled 
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via an interface of said scales, and wherein said 
authorization device is a chip card. 

13. The mailing machine assembly according to claim 1, 
wherein said mailing machine has a modem and a modem interface 
for loading therethrough the initialization data or values, 
and wherein said authorization device is an insertable chip 
card, for authorizing at least that part of the INIT data or 
values which are loaded into said mailing machine from a data 
source via said modem interface. 

14. The mailing machine assembly according to claim 1, 
wherein said mailing machine is a franking machine having at 
least one program memory with an initialization program and a 
postal security module, for checking the authorization before 
and during the initialization, and wherein said postal 
security module is configured for loading initialization data. 

15. The mailing machine assembly according to claim 14, 
wherein a checking of the authorization before and during the 
initialization is performed on the basis of a unique 
authorization number, input via a dongle or a chip card and 
wherein the authorization is given if the unique authorization 
number input into the mailing machine has a predetermined 
relationship with a number stored in said postal security 
module . 
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16. The mailing machine assembly according to claim 1, which 
comprises a program memory at least partly storing the 
initialization program, said program memory forming a 
component part of said security module, and including a 
separate program memory operatively in connection with said 
security module and storing another part of the initialization 
program . 

17. The mailing machine assembly according to claim 16, 
wherein the other part of the initialization program is for 
initialization data stored in a non-volatile manner externally 
of the security module . 

18. A method of initializing a mailing machine, which 
comprises the steps of: 

switching a mailing machine into an initialization mode; 

authorizing an initialization with an authorization device and 
checking authorization with a security module, in order to 
prevent initialization without authorization ,- 

if authorization is found, inputting initialization data at 
least partly supplied by a data source; and 

ending the initialization and cancelling of the authorization. 
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19. The method according to claim 18, which comprises: 

switching a franking machine into the initialization mode and 
establishing a connection to a data source; 

authorizing initialization with an authorization device ; 

inputting a battery date BAT_DATE_SAD of a battery of the 
security module, a telephone number of the telepostage data 
center TDC of the destination country and a postage call-up 
number PAN; 

transmitting a serial number SAD-SN of the security module to 
the telepostage data center TDC of the country, to initialize 
a comparison of the serial number SAD-SN sent with a stored 
serial number, and to generate a notification; 

receiving the notification sent by the telepostage data center 
TDC in the franking machine and loading codes DES-Keys for 
credit recharging into the security module SAD; and 

terminating the initialization and cancelling the 
authorization by removing the authorization device. 

20. The method according to claim 19, wherein the 
establishing step comprises connecting via a transmission 
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device selected from the group consisting of a modem, a 
laptop, and a PC interface. 

21. The method according to claim 19, which comprises 
switching into the initialization mode at the goods receiving 
location in the destination country as a result of activating 
a means of activating a user interface and establishing a 
connection to a data source via a transmission device selected 
from the group consisting of a modem, a laptop, and a PC 
interface . 

22. The method according to claim 19, wherein the 
notification sent by the telepostage data center TDC includes 
a code MAC - Key for a security imprint, which is received by 
the franking machine and loaded into the security module SAD. 

23. The method according to claim 19, wherein the codes DES- 
Keys for credit recharging include the subcodes Key(O) , 
Key(l) , Kvar and are loaded into the security module SAD. 

24. The method according to claim 23, wherein the 
notification sent by the telepostage data center TDC includes 
extra data stored in a non-volatile memory externally of the 
security module and including the inkjet cartridge data. 



-41- 



GTP/US 3183 

25. The method according to claim 18, wherein the inputting 
step comprises inputting initialization data with the chip 
card. 

26. The method according to claim 18, wherein a data input of 
extra data includes inkjet cartridge data and and the data are 
stored in a non-volatile memory externally of the security 
module . 

27. The method according to claim 18, which comprsises 
interrogating the authorization device before and during the 
initialization of the mailing machine with predetermined INIT 
data. 
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